Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/Vbmc4A7vGxv2kP4NUoydZlXQbHQ.roa
File: Vbmc4A7vGxv2kP4NUoydZlXQbHQ.roa (raw, json)
Hash identifier: bZTrRB3W64Xiq7q7LTEc6gBws2/zsoCcNt0jeS6nP4k=
Subject key identifier: 55:B9:9C:E0:0E:EF:1B:1B:F6:90:FE:0D:52:8C:9D:66:55:D0:6C:74
Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Certificate serial: 018CC64B5191B6ED7D8CE789007068AB0C84
Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/Vbmc4A7vGxv2kP4NUoydZlXQbHQ.roa
Signing time: Mon 01 Jan 2024 18:31:13 +0000
ROA not before: Mon 01 Jan 2024 18:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207590
IP address blocks: 94.154.1.0/24 maxlen: 24
94.154.1.1/32 maxlen: 32
2a0f:f3c0:1::/48 maxlen: 48
2a0f:f3c0::/29 maxlen: 29
2a0f:f3c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:51:91:b6:ed:7d:8c:e7:89:00:70:68:ab:0c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Validity
Not Before: Jan 1 18:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55b99ce00eef1b1bf690fe0d528c9d6655d06c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:27:6e:51:b0:71:19:18:7b:96:24:0d:36:76:
43:f4:78:fa:cb:82:49:49:aa:e9:15:de:c6:b7:a0:
e3:ab:ac:45:f4:b5:02:f3:6d:9f:5e:ef:86:12:23:
f5:49:0d:c2:35:14:3d:fb:01:2f:20:d1:c3:66:4d:
26:24:09:e6:ae:ea:c0:3e:86:22:cb:79:db:e3:43:
f6:ba:b8:30:3e:0b:d3:c7:b3:e3:e6:4c:a2:fc:36:
ea:cb:cb:ec:1f:8c:ec:d4:cd:40:76:8e:28:85:4d:
6b:99:75:5d:7f:a6:3a:15:1f:bf:d1:25:48:3c:12:
ac:fd:58:88:90:ae:f8:88:27:4a:5e:aa:62:93:e6:
c0:67:d2:cc:5c:a9:72:79:ea:56:ba:23:34:81:fd:
ab:2a:76:5f:9e:34:ce:7a:af:0d:66:26:3e:8b:05:
47:18:ad:57:b5:5a:8f:ea:1b:4e:da:be:22:96:23:
f1:06:c8:71:38:30:f6:eb:b0:cd:36:cd:b3:ec:cd:
8c:d0:3d:5c:33:2f:fd:b5:d9:e7:d6:1d:9b:db:34:
1a:f5:34:b0:b8:c6:f8:bb:7b:ce:a6:66:75:6a:b2:
27:94:2a:d0:15:02:cc:97:90:02:b4:fe:9f:f3:a2:
6e:b6:88:ba:58:bc:c3:ea:af:2c:12:94:29:c7:22:
72:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B9:9C:E0:0E:EF:1B:1B:F6:90:FE:0D:52:8C:9D:66:55:D0:6C:74
X509v3 Authority Key Identifier:
keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/Vbmc4A7vGxv2kP4NUoydZlXQbHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.1.0/24
IPv6:
2a0f:f3c0::/29
Signature Algorithm: sha256WithRSAEncryption
5d:81:d4:d8:2f:49:11:35:53:5f:06:72:ce:9f:39:37:a4:38:
0e:6f:d0:b6:49:32:75:db:cd:1a:fa:f2:27:66:5d:e5:e9:2f:
94:3a:65:7b:5c:7f:b4:ae:35:eb:8e:9a:49:80:87:52:2f:3c:
af:49:f9:d6:cf:3a:ea:35:80:cf:74:c2:19:c3:d2:84:b7:b7:
ca:2c:ca:c1:71:5d:9a:7f:e2:43:f7:b5:db:6a:6b:65:d6:4f:
87:58:e4:77:c6:85:95:3c:65:a1:da:61:de:0d:bd:6e:3b:8c:
f9:c4:bc:2a:74:64:ab:fd:e5:c3:53:14:17:f0:28:a1:8a:b7:
b8:1f:8a:76:07:05:e3:97:5a:d4:cb:bd:09:ce:8f:b5:73:66:
03:a3:7e:3e:d6:b6:c6:7d:c6:ac:7a:43:13:7e:e7:91:10:5d:
fb:b7:57:01:47:03:dc:6b:42:57:71:39:46:56:6b:1a:e5:33:
b7:cd:5a:b8:e3:49:b8:38:b5:76:e5:ba:3d:38:e0:82:e5:e2:
f5:03:b6:d9:eb:66:41:39:9d:4a:57:ef:f4:7d:b6:3d:69:41:
62:23:00:fd:c1:e3:e8:70:9a:24:eb:95:89:f7:af:41:e3:c6:
0a:9d:49:c0:47:cc:2d:cc:0b:68:0a:f8:bd:1c:15:43:1c:23:
dc:e6:58:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:55:09 2024 by rpki-client on console-ams.rpki-client.org